https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 22:17:27 +0000 https://vulnerability.circl.lu/vuln/bdu:2022-01899 bdu:2022-01899 https://vulnerability.circl.lu/vuln/bdu:2022-01899 https://vulnerability.circl.lu/vuln/cnvd-2022-21221 cnvd-2022-21221 https://vulnerability.circl.lu/vuln/cnvd-2022-21221 https://vulnerability.circl.lu/vuln/fkie_cve-2022-25312 <p>An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions &lt; 2.7. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application&#39;s processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access. This issue is fixed in Apache Any23 2.7.</p> <p>An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions &lt; 2.7. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application&#39;s processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access. This issue is fixed in Apache Any23 2.7.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2022-25312 https://vulnerability.circl.lu/vuln/ghsa-2rmm-87v7-34rj <p><strong>Affected:</strong> Maven: org.apache.any23:apache-any23</p> <p>An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions &lt; 2.7. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application&#39;s processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access. This issue is fixed in Apache Any23 2.7.</p> <p><strong>Affected:</strong> Maven: org.apache.any23:apache-any23</p> <p>An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions &lt; 2.7. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application&#39;s processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access. This issue is fixed in Apache Any23 2.7.</p> https://vulnerability.circl.lu/vuln/ghsa-2rmm-87v7-34rj https://vulnerability.circl.lu/vuln/gsd-2022-25312 gsd-2022-25312 https://vulnerability.circl.lu/vuln/gsd-2022-25312